Revolut confirms customer data breach through fake government requests

Revolut disclosed sensitive customer information to an unauthorized third party after attackers used a legitimate government agency email domain to submit fraudulent information requests. The exposed data reportedly included identity and contact details, passports and driver’s licenses, and may have included verification selfies, account statements, and transaction histories; Revolut says a limited number of (potentially high-net-worth) customers were affected, has blocked the offending email, and notified the government agency, law enforcement and regulators.